Authentication Method - Temporary Access Pass - One-time

Why This Matters

Temporary Access Passes (TAPs) that allow multiple uses increase the risk of credential reuse and unauthorized access. By requiring one-time use, you ensure that each pass is immediately consumed and cannot be reused if intercepted, reducing the window of exposure for account compromise.

What Aether365 Checks

This security check verifies that the isUsableOnce property for the Temporary Access Pass authentication method configuration is set to true. It appears in the Aether365 dashboard under entra-id checks.

How to Fix

To configure Temporary Access Pass for one-time use:

Microsoft references

• Howto authentication temporary access pass
• Temporaryaccesspassauthenticationmethodconfiguration
• [Graph explorer](https://developer.microsoft.com/en-us/graph/graph-explorer?request=policies/authenticationMethodsPolicy/authenticationMethodConfigurations()